[Firebird-devel] support file permissions (tightening security)

[John M. B. <bel...@cs...>]

With the Darwin / MacOS X port working (CLASSIC) I am in the process of
removing a number of overkill changes I made to get the port started.  In
particular I am interested in which process have to have write permissions
to while support files.  The support files that I'm looking at right now
are interbase.log, isc4.gdb, isc_event1.* isc_lock1.*, and isc_init1.*.
If anyone knows who needs what permissions to these files it will help me
make a more secure release.  Also, do you know if you need to be root to
completely build Firebird?  After I get the run time support file location
working you will be able to have two installs on the same machine
(with the exception of two servers listening to the same port).  So you
won't need to clobber the existing installs config / lock files when you
compile a new version (which means, I hope, you can compile from a user
account creating the support files with the correct user permissions,
chown-ing them to root when it is time to install).

If there is code that I need to write to make a user build possible then I
would also like to make it as generic as possible. Let me know.  Thanks.

-John